Legal

Privacy Policy

Scaffold — Termly output goes here. Generate the full policy text at termly.io and paste it into this file before launch. The required content (per spec §3.0.2) is itemized below.

What we collect

When you use DynoMiata we collect:

OBD pull data — the speed, RPM, and atmospheric values your OBD adapter records. This is what the calculator runs on.
VIN (hashed) — if you opt into pseudonymized data sharing, your vehicle's VIN is SHA-256-hashed at the moment of submission. Plaintext VIN never touches our storage.
Email address — collected only if you upgrade to Pro (via Stripe Checkout) or sign up for our iPhone waitlist.
Stripe customer + payment IDs — for Pro buyers, to fulfill the purchase and process refunds.
IP address + request timestamps — used for rate limiting and abuse prevention; not joined with your account profile.

Who processes it

Cloudflare — hosts Pages (frontend), Workers (API), KV (waitlist), and D1 (Pro user data).
Stripe — payment processor. Stripe collects your email and payment details directly via their hosted Checkout page; we receive a customer ID after purchase.
Resend — sends magic-link login emails and unlock confirmation emails for Pro purchases.

How long we keep it

Pro account data is retained for the lifetime of your account. Free-tier OBD pulls are never persisted to our servers — they live only in your browser's local storage and disappear when you close the tab.

Stripe retains payment records for 7 years under US tax and anti-money-laundering law. This is outside our control.

Your rights

You can:

Access all data we hold about you via your account dashboard.
Export all your saved runs as CSV at any time (Pro feature).
Delete your account — we honor this within 30 days. On deletion, your runs, mods, vehicles, profile email, and waitlist entries are erased. Stripe payment records are retained for 7 years for tax compliance; your email is removed from our database but Stripe retains its own copy of the original transaction.

California residents

We do not sell personal information. See our Do Not Sell or Share My Personal Information statement at the bottom of this page.

Contact

Questions, requests, or complaints: support@dynomiata.com.

Do Not Sell or Share My Personal Information

We do not sell personal information. We do not share it with third parties for advertising or marketing. The processors listed above (Cloudflare, Stripe, Resend) are operational service providers under contract, not third-party sellers.

Last updated: TBD before launch.